Automated banking machine with improved resistance to fraud

ABSTRACT

An automated banking machine ( 10 ) includes a lockable first fascia portion ( 20 ) which when unlocked enables access to a chest lock input device ( 104 ), inputs to which enable opening a chest door ( 18 ) of the machine. Opening the first fascia portion also enables access to an actuator ( 116 ) which enables moving a second fascia portion ( 22 ) for conducting service activities. A baffle structure ( 164 ) is positioned on the housing adjacent the second fascia portion to enable cooling air flow within the housing of the machine and to prevent the introduction of moisture into the housing. A controller ( 72 ) in the machine selectively illuminates light emitting devices ( 118, 126 ) for purposes of facilitating user operation of the machine. Sensing devices ( 128 ) adjacent a card reader slot ( 28 ) on the machine enables the controller to detect the presence of a fraud device or unauthorized card reading devices.

CROSS REFERENCE TO RELATED APPLICATION

This Application claims benefit pursuant to 35 U.S.C. §119(e) ofProvisional Application 60/429,478 filed Nov. 26, 2002. This applicationalso claims benefit pursuant to 35 U.S.C. § 120 of application Ser. No.09/414,249 filed Oct. 7, 1999 which claims priority pursuant to 35U.S.C. § 119(e) of Provisional Application 60/103,731 filed Oct. 9,1998.

TECHNICAL FIELD

This invention relates to automated banking machines. Specifically thisinvention relates to automated banking machine apparatus, systems andmethods that provide for improved reliability and serviceability.

BACKGROUND ART

Automated banking machines are known. A common type of automated bankingmachine used by consumers is an automated teller machine (“ATM”). ATMsenable customers to carry out banking transactions. Examples of bankingtransactions that are sometimes carried out with ATMs include thedispensing of cash, the making of deposits, the transfer of fundsbetween accounts, the payment of bills, the cashing of checks, thepurchase of money orders, the purchase of stamps, the purchase oftickets, the purchase of phone cards and account balance inquiries. Thetypes of banking transactions a customer can carry out at an ATM aredetermined by the particular banking machine, the system in which it isconnected and the programming of the machine by the entity responsiblefor its operation.

Other types of automated banking machines may be operated in other typesof environments. For example certain types of automated banking machinesmay be used in a customer service environment. For example serviceproviders may use certain types of automated banking machines forpurposes of counting currency or other items that are received from orwhich are to be given to a customer. Other types of automated bankingmachines may be used to validate items which provide the customer withaccess, value or privileges such as tickets, vouchers, checks or otherfinancial instruments. Other examples of automated banking machines mayinclude machines which are operative to provide users with the right tomerchandise or services in an attended or a self-service environment.For purposes of this disclosure an automated banking machine shall bedeemed to include any machine may be operated to carry out transactionsincluding transfers of value.

Automated banking machines are typically used in environments where theycarry out or support the conduct of transactions. It is desirable tokeep automated banking machines in operation at all appropriate times tothe extent possible. If a machine should experience a malfunction, it isuseful to return the machine to service as quickly as possible.

Thus, there exists a need for improvements in the operation,reliability, servicing and repair of automated banking machines.

DISCLOSURE OF INVENTION

It is an object of an exemplary embodiment of the invention to providean automated banking machine.

It is an object of an exemplary embodiment of the invention to providean automated banking machine which provides improved access forservicing.

It is a further object of an exemplary embodiment of the invention toprovide an automated banking machine which enables controlling thetemperature of machine components to extend service life.

It is a further object of an exemplary embodiment of the invention toprovide an automated banking machine which provides for reliableillumination of transaction areas while facilitating servicing of themachine.

It is a further object of an exemplary embodiment of the invention toprovide an automated banking machine that facilitates the detection offraudulent activity which may be attempted at the machine.

It is a further object of an exemplary embodiment of the invention toprovide an automated banking machine which improved diagnosticcapabilities.

It is a further object of an exemplary embodiment of the invention toprovide an automated banking machine which reduces the risk ofunauthorized access to devices and operations of the machine.

Further objects of exemplary embodiments will be made apparent in thefollowing Best Modes for Carrying Out Invention and the appended claims.

The foregoing objects are accomplished in some exemplary embodiments byan automated banking machine which is an ATM. The ATM includes aplurality of transaction function devices. In the exemplary embodimentthe transaction function devices include input and output devices whichare part of a user interface. In the exemplary embodiment thetransaction function devices also include devices for carrying out typesof banking transactions such as a currency dispenser device and adeposit accepting device. The exemplary ATM also includes at least onecomputer which is generally referred to herein as a controller, andwhich is operative to cause the operation of the transaction functiondevices in the machine.

In an exemplary embodiment the ATM includes a housing with a securechest portion and an upper housing area. The chest portion housescertain transaction function devices such as the currency dispenserdevice. The chest portion includes a chest door which is generallysecured but which is capable of being opened when unlocked by authorizedpersons.

In the exemplary embodiment the upper housing area includes a firstportion and a second portion. Access to the first and second portionsare controlled by independently movable first and second fasciaportions. In the exemplary embodiment one or more devices that must bemanipulated in order to unlock the chest door are positioned within thefirst housing area. Access to the first portion of the upper housing iscontrolled by a fascia lock in operative connection with the firstfascia portion. Thus when servicing of devices within the chest portionis required, a servicer first accesses the first portion of the upperhousing area by unlocking the fascia lock to gain access to the chestlock input devices located within the upper housing area in the firstportion. Once access to the first portion is achieved, the servicerprovides one or more inputs to the chest lock input device to enableunlocking the chest door. In the exemplary embodiment this may beaccomplished without moving the second fascia portion or moving thetransaction function devices which are located within the second portionof the upper housing area.

In some exemplary embodiments the display types used as part of the userinterface of the automated banking machine generate considerable heat.The combination of the heat generated by the display as well as otherdevices within the housing of the machine can cause elevatedtemperatures within the housing. This problem may occur more frequentlywithin machines that are located in an outdoor environment where theexternal temperature may often become elevated. Unduly high temperatureswithin the machine may cause damage to the display or other machinecomponents, or may shorten component life.

In the exemplary embodiment the housing is provided with an air coolingopening in proximity with the display so as to facilitate a flow ofcooling air therethrough. In a further exemplary embodiment a bafflestructure is provided in intermediate relation between the air coolingopening and the display and other components within the machine, so asto reduce the risk of moisture and other contaminants entering theinterior of the machine as well as to reduce the risk of unauthorizedaccess. In an exemplary embodiment the baffle structure is adapted todirect moisture and other contaminants to the outside of the housing ofthe machine while facilitating access to the transaction functiondevices for servicing.

In some exemplary embodiments during operation of the ATM, thetransaction areas are illuminated to facilitate operation of the machineby users. Such transaction areas include in an exemplary embodiment,recessed pockets on the machine housing from which users can receivecurrency to be delivered to them, as well as where a user inputs deposititems. Further in an exemplary embodiment the controller of the ATM isoperative to illuminate the transaction areas at those times when theuser would be expected to receive or place items in such transactionareas during the conduct of transactions. This facilitates guiding theuser to the particular transaction area on the machine even when themachine is being operated during daylight hours.

In an exemplary embodiment the transaction areas are positioned oncomponents of the machine that are relatively movable during servicingactivities. To facilitate the illumination of such areas while enablingrelative movement, a light transmissive window is provided adjacent tocertain transaction areas in the exemplary embodiment. In an operativeposition of the machine the window is aligned with an illuminationsource located in another portion of the housing. A controller of themachine initiates illumination of the illumination source at appropriatetimes in the conduct of transactions which causes illumination of thetransaction area. However, when servicing the machine the transactionarea and the illumination source may be relatively moved without makingspecial accommodations such as disconnecting electrical connectors orlight guides in order to gain access to conduct servicing activities.

In some exemplary embodiments the capability of illuminating selectedareas of the machine during certain transaction steps may be utilized inconjunction with an anti-fraud device. In an exemplary embodiment theanti-fraud device is used to reduce the risk that an unauthorized cardreading device is installed externally of the machine adjacent to thecard reader slot of the machine fascia. Criminals are sometimesingenious and in the past some have produced reading devices that canintercept magnetic stripe data on cards that are being input to an ATMby a consumer. By intercepting this data, criminals may be able toconduct unauthorized transactions with the consumer's card number. Suchexternal reading devices may be made to appear to be a part of thenormal ATM fascia.

In an exemplary embodiment the housing in surrounding relation of thecard reader slot is illuminated responsive to operation of thecontroller. In some exemplary machines the housing is operative toilluminate an area generally entirely surrounding the slot so as to makeit more readily apparent to a user that an unauthorized modification orattachment to the fascia may have been made.

In some exemplary embodiments during normal operation, the illuminationof the area surrounding the fascia card slot is operative to help toguide the user to the slot such during a transaction when a user isrequired to input or take their card. The exemplary ATM is provided withradiation sensing devices positioned adjacent to the illuminationdevices that are operative to illuminate the area surrounding the cardreader slot. The exemplary controller is programmed to sense changes inthe magnitude of radiation sensed by the one or more radiation sensingdevices. The installation of an unauthorized card reading device inproximity to the card reading slot generally produces a change in themagnitude of the radiation sensed by the radiation sensing devices. Theexemplary controller is programmed to recognize such changes and to takeappropriate action in response thereto so as to reduce the possibilityof fraud. Such action may include in some exemplary embodiments, themachine sending a status message through a network to a person to benotified of a possible fraud condition. Such actions may also include insome embodiments, warning the user of the machine to look for theinstallation of a possible fraud device. Of course these approaches areexemplary and in other embodiments other approaches may be used.

In some exemplary embodiments of the ATM an improved diagnostic systemmay be provided for authorized servicers of the machine. The improveddiagnostic system may include security features so as to reduce the riskof unauthorized persons using service and diagnostic capabilities of themachine for unauthorized purposes.

In an exemplary embodiment authorized servicers are provided with aportable diagnostic article bearing computer readable instructions suchas a CD. When an authorized servicer is to service the machine, theportable diagnostic article is placed into operative engagement with adiagnostic article reading device. This may include for example a CDdrive located within the chest portion of the housing of the ATM. Thisexemplary approach may reduce the risk that persons who do not haveaccess to the chest area are enabled to access the dianostic articlereading device. However, in other embodiments other approaches may beused.

In an exemplary embodiment the diagnostic article provides to thecontroller of the machine one or more secret codes. The secret codes maythen be manipulated through the operation of the controller to determineif the diagnostic article is authorized. In some embodiments a servicermay also be required to input identifying information through one ormore input devices on the ATM. Such identifying information may also beutilized in the determination as to whether the diagnostic article isauthorized. Further in some exemplary embodiments the secret codes inthe diagnostic article may be date, location and/or device sensitivesuch that the diagnostic article with the secret codes may be employedonly during particular times and/or during a particular calendar period,at particular machines or for only certain devices in the machine. Ofcourse these security procedures are exemplary and in other embodimentsother or additional approaches may be used.

In some exemplary embodiments the ATM controller responsive toauthentication of the diagnostic article is operative to enable themachine to output protected diagnostic data which is stored in one ormore data stores within the machine. This may include for exampleinformation concerning performance of devices, information concerningsensed malfunctions or near malfunctions, data concerning statisticaloperational trends of various transaction devices and/or otherinformation that may be useful in diagnosing a malfunction of themachine and/or in preventing a future malfunction. In the exemplaryembodiment this diagnostic data is stored in a protected manner in thedata store of the machine so as to prevent access thereto byunauthorized persons. However, when the machine is engaged with anauthorized diagnostic article such data or information based thereon isenabled to be output either through output devices on the machine suchas a screen, and/or other devices such as a portable terminal or cellphone carried by a servicer.

In some exemplary embodiments the diagnostic article further includesservice data which is useful in diagnosing and/or correcting problemswhich have or which may occur at the machine. In some embodiments theservice data may be included within or interoperable with electronicservice manual data which describes various features of the machine andinstructions for remedial actions and preventive maintenance. In someexemplary embodiments the service data may include instructions whichare operative to cause the controller within the machine to conduct atleast one diagnostic test of one or more transaction devices. In someembodiments the service data may further be operative to enable thecontroller to output suggested remedial actions or suggest furthertesting based on one or more results of a diagnostic test. In someexemplary embodiments a servicer may be enabled to browse throughservice manual data or other information included in or on thediagnostic article so as to receive outputs that facilitate servicingand maintaining the machine.

In some exemplary embodiments the diagnostic article may include serviceor other data in an encrypted format. Various types of standard andnonstandard encryption may be used in various embodiments. Thecontroller may be operative to decrypt such encrypted data so as tofacilitate the output of the data from the ATM. Further in someexemplary embodiments the diagnostic article may include browsersoftware thereon. Such browser software may be loaded from thediagnostic article to the controller of the machine and used tointerpret the service data from the diagnostic article. In someembodiments the browser software may be operative to interpret embeddedinstructions of a nonpublic and/or nonstandard nature which may beincluded within the service data. This may facilitate the provision ofservice data on the diagnostic article while preventing access byunauthorized users. In some exemplary embodiments the diagnostic articlemay further include instructions or devices which prevent the permanentloading of the browser software and/or service data onto anothercomputer and/or may operate to cause such items to be erased from memoryof a computer when the diagnostic article is removed from operativeengagement with a computer.

In some exemplary embodiments the diagnostic article may be utilizedwith computer devices that are separate from the ATM. This may includefor example devices such as notebook computers, PCs, PDAs or cellphones. In such exemplary embodiments the service article may beutilized with such devices to provide access to service data thereonsuch as for example electronic service manuals. Security provisions maybe provided in the manner previously discussed or in other manners toassure that use is not made of the diagnostic article by unauthorizedusers. Further, in exemplary embodiments instructions from the servicearticle that may be operative to cause a controller of an ATM tointeract with transaction function devices may be rendered inoperativewhen the service article is installed in connection with a computerdevice which is not an ATM.

As will be appreciated, the foregoing objects and examples are exemplaryand embodiments of the invention need not meet all or any of theforegoing objects, and need not include all or any of the exemplaryfeatures described above. Additional aspects and embodiments within thescope of the claims will be devised by those having skill in the artbased on the teachings set forth herein.

BRIEF DESCRIPTION OF DRAWINGS

FIG. 1 is an isometric external view of an exemplary automated bankingmachine which is an ATM and which incorporates some aspects and featuresof inventions claimed in the present application.

FIG. 2 is a front plan view of the ATM shown in FIG. 1.

FIG. 3 is a transparent side view showing schematically some internalfeatures of the ATM.

FIG. 4 is a schematic view representative of the software architectureof an exemplary embodiment.

FIG. 5 is a front view showing the fascia portion moved to access afirst portion of an upper housing of the machine.

FIG. 6 is a partially transparent side view showing air flow through anair cooling opening of the machine.

FIG. 7 is an isometric view showing a baffle structure used in anexemplary embodiment.

FIG. 8 is an isometric view showing a fascia portion in an operativeposition adjacent the baffle.

FIG. 9 is a transparent rear isometric view showing blowers, airopenings and an air moving duct within a housing of an exemplaryembodiment.

FIG. 10 is an isometric view of the ATM shown in FIG. 1 with thecomponents of the upper housing portion removed and showing aspects ofthe illumination system for the transaction areas supported on the chestportion of the housing.

FIG. 11 is a schematic side view of the housing showing schematicallythe illumination system for the transaction areas and representing inphantom the movement of the upper fascia portion so as to provide accessfor servicing.

FIG. 12 and FIG. 13 is a schematic view showing exemplary logic that maybe used in servicing the machine through use of a diagnostic article.

FIG. 14 is a schematic view of an illumination and anti-fraud sensingdevice which bounds a card reader slot of an exemplary embodiment.

FIG. 15 is a schematic side view of an unauthorized card reading devicein operative connection with a housing of the anti-fraud sensor.

FIG. 16 is a schematic view of exemplary logic for purposes of detectingthe presence of an unauthorized card reading device in proximity to thecard reader during operation of the ATM.

BEST MODES FOR CARRYING OUT INVENTION

Referring now to the drawings and particularly to FIG. 1, there is showntherein an exemplary embodiment of an automated banking machinegenerally indicated 10. In the exemplary embodiment automated bankingmachine 10 is a drive up ATM, however the features described and claimedherein are not necessarily limited to ATMs of this type. The exemplaryATM includes a housing 12. Housing 12 includes an upper housing area 14and a secure chest area 16 in a lower portion of the housing. Access tothe chest area 16 is controlled by a chest door 18 which when unlockedby authorized persons in the manner later explained, enables gainingaccess to the interior of the chest area.

The exemplary ATM 10 further includes a first fascia portion 20 and asecond fascia portion 22. Each of the fascia portions is movably mountedrelative to the housing as later explained, which in the exemplaryembodiment facilitates servicing.

The ATM includes a user interface generally indicated 24. The exemplaryuser interface includes input devices such as a card reader 26 (shown inFIG. 3) which is in connection with a card reader slot 28 which extendsin the second fascia portion. Other input devices of the exemplary userinterface 24 include function keys 30 and a keypad 32. The exemplary ATM10 also includes a camera 34 which also may serve as an input device forbiometric features and the like. The exemplary user interface 24 alsoincludes output devices such as a display 36. Display 36 is viewable byan operator of the machine when the machine is in the operativecondition through an opening 38 in the second fascia portion 22. Furtheroutput devices in the exemplary user interface include a speaker 40. Aheadphone jack 42 also serves as an output device. The headphone jackmay be connected to a headphone provided by a user who is visuallyimpaired to provide the user with voice guidance in the operation of themachine. The exemplary machine further includes a receipt printer 44(see FIG. 3) which is operative to provide users of the machine withreceipts for transactions conducted. Transaction receipts are providedto users through a receipt delivery slot 46 which extends through thesecond fascia portion. Exemplary receipt printers that may be used insome embodiments are shown in U.S. Pat. No. 5,729,379 and U.S. Pat. No.5,850,075, the disclosures of which are incorporated by referenceherein. It should be understood that these input and output devices ofthe user interface 24 are exemplary and in other embodiments, other ordifferent input and output devices may be used.

In the exemplary embodiment the second fascia portion has includedthereon a deposit envelope providing opening 48. Deposit envelopes maybe provided from the deposit envelope providing opening to users who mayplace deposits in the machine. The second fascia portion 20 alsoincludes a fascia lock 50. Fascia lock 50 is in operative connectionwith the second fascia portion and limits access to the portion of theinterior of the upper housing behind the fascia to authorized persons.In the exemplary embodiment fascia lock 50 comprises a key type lock.However, in other embodiments other types of locking mechanisms may beused. Such other types of locking mechanisms may include for example,other types of mechanical and electronic locks that are opened inresponse to items, inputs, signals, conditions, actions or combinationsor multiples thereof.

The exemplary ATM 10 further includes a delivery area 52. Delivery area52 is in connection with a currency dispenser device 54 which ispositioned in the chest portion and is shown schematically in FIG. 3.The delivery area 52 is a transaction area on the machine in whichcurrency sheets are delivered to a user. In the exemplary embodiment thedelivery area 52 is positioned and extends within a recessed pocket 56in the housing of the machine.

ATM 10 further includes a deposit acceptance area 58. Deposit acceptancearea is an area through which deposits such as deposit envelopes to bedeposited by users are placed in the machine. The deposit acceptancearea 58 is in operative connection with a deposit accepting devicepositioned in the chest area 16 of the ATM. Exemplary types of depositaccepting devices are shown in U.S. Pat. No. 4,884,769 and U.S. Pat. No.4,597,330, the disclosures of which are incorporated herein byreference.

In the exemplary embodiment the deposit acceptance area serves as atransaction area of the machine and is positioned and extends within arecessed pocket 60. It should be understood that while the exemplaryembodiment of ATM 10 includes an envelope deposit accepting device and acurrency sheet dispenser device, other or different types of transactionfunction devices may be included in automated banking machines anddevices encompassed by the present invention. These may include forexample, check and/or money order accepting devices, ticket acceptingdevices, stamp accepting devices, card dispensing devices, money orderdispensing devices and other types of devices which are operative tocarry out transaction functions.

In the exemplary embodiment the ATM 10 includes certain illuminatingdevices which are used to illuminate transaction areas, some of whichare later discussed in detail. First fascia portion 20 includes anillumination panel 62 for illuminating the deposit envelope providingopening. Second fascia portion 22 includes an illumination panel 64 forilluminating the area of the receipt delivery slot 46 and the cardreader slot 28. Further, an illuminated housing 66 later discussed indetail, bounds the card reader slot 28. Also, in the exemplaryembodiment an illuminating window 68 is positioned in the recessedpocket 56 of the delivery area 52. An illuminating window 70 ispositioned in the recessed pocket 60 of the deposit acceptance area 58.It should be understood that these structures and features are exemplaryand in other embodiments other structures and features may be used.

As schematically represented in FIG. 3, the ATM 10 includes one or moreinternal computers. Such internal computers include one or moreprocessors. Such processors may be in operative connection with one ormore data stores. In some embodiments processors may be located oncertain devices within the ATM so as to individually control theoperation thereof. Examples such as multi-tiered processor systems areshown in U.S. Pat. No. 6,264,101 and U.S. Pat. No. 6,131,809, thedisclosures of which are incorporated herein by reference.

For purposes of simplicity, the exemplary embodiment will be describedas having a single controller which controls the operation of deviceswithin the machine. However it should be understood that such referenceshall be construed to encompass multicontroller and multiprocessorsystems as may be appropriate in controlling the operation of aparticular machine. In FIG. 3 the controller is schematicallyrepresented 72. Also as schematically represented, the controller is inoperative connection with one or more data stores 78. Such data storesin exemplary embodiments are operative to store program instructions,values and other information used in the operation of the machine.Although the controller is schematically shown in the upper housingportion of ATM 10, it should be understood that in alternativeembodiments controllers may be located within various portions of theautomated banking machine.

In order to conduct transactions the exemplary ATM 10 communicates withremote computers. The remote computers are operative to exchangemessages with the machine and authorize and record the occurrence ofvarious transactions. This is represented in FIG. 3 by the communicationof the machine through a network with a bank 78, which has at least onecomputer which is operative to exchange messages with the ATM through anetwork. For example, the bank 78 may receive one or more messages fromthe ATM requesting authorization to allow a customer to withdraw $200from their account. The remote computer at the bank 78 will operate todetermine that such a withdrawal is authorized and will return one ormore messages to the machine through the network authorizing thetransaction. After the ATM conducts the transaction, the ATM willgenerally send one or more messages back through the network to the bankindicating that the transaction was successfully carried out. Of coursethese messages are merely exemplary.

It should be understood that in some embodiments the ATM may communicatewith other entities and through various networks. For example asschematically represented in FIG. 3, the ATM will communicate withcomputers operated by service providers 80. Such service providers maybe entities to be notified of status conditions or malfunctions of theATM as well as entities who are to be notified of corrective actions. Anexample of such a system for accomplishing this is shown in U.S. Pat.No. 5,984,178, the disclosure of which is incorporated herein byreference. Other third parties who may receive notifications fromexemplary ATMs include entities responsible for delivering currency tothe machine to assure that the currency supplies are not depleted. Otherentities may be responsible for removing deposit items from the machine.Alternative entities that may be notified of actions at the machine mayinclude entities which hold marketing data concerning consumers and whoprovide messages which correspond to marketing messages to be presentedto consumers. Various types of messages may be provided to remotesystems and entities by the machine depending on the capabilities of themachines in various embodiments and the types of transactions beingconducted.

FIG. 4 shows schematically an exemplary software architecture which maybe operative in the controller 72 of machine 10. The exemplary softwarearchitecture includes an operating system such as for example Microsoft®Windows, IBM OS/2® or Linux. The exemplary software architecture alsoincludes an ATM application 82. The exemplary application includes theinstructions for the operation of the automated banking machine and mayinclude, for example, an Agilis™ 91x application that is commerciallyavailable from Diebold, Incorporated which is a cross vendor softwareapplication for operating ATMs. A further example of a softwareapplication which may be used in some embodiments is shown in U.S. Pat.No. 6,289,320, the disclosure of which is incorporated herein byreference.

In the exemplary embodiment middleware software schematically indicated84 is operative in the controller. In the exemplary embodiment themiddleware software operates to compensate for differences betweenvarious types of automated banking machines and transaction functiondevices used therein. The use of a middleware layer enables the moreready use of an identical software application on various types of ATMhardware. In the exemplary embodiment the middleware layer may beInvolve® software which is commercially available from Nexus Software, awholly owned subsidiary of the assignee of the present invention.

The exemplary software architecture further includes a diagnostics layer86. The diagnostics layer 86 is operative as later explained to enableaccessing and performing various diagnostic functions of the deviceswithin the ATM. In the exemplary embodiment the diagnostics operate inconjunction with a browser schematically indicated 88.

The exemplary software architecture further includes a service providerlayer schematically indicated 90. The service provider layer may includesoftware such as WOSA XFS service providers for J/XFS service providerswhich present a standardized interface to the software layers above andwhich facilitate the development of software which can be used inconjunction with different types of ATM hardware. Of course thissoftware architecture is exemplary and in other embodiments otherarchitectures may be used.

As schematically represented in FIG. 4, a controller 72 is in operativeconnection with at least one communications bus 92. The communicationsbus may in some exemplary embodiments be a universal serial bus (USB) orother standard or nonstandard type of bus architecture. Thecommunications bus 92 is schematically shown in operative connectionwith transaction function devices 94. The transaction function devicesinclude devices in the ATM which are used to carry out transactions.These may include for example the currency dispenser device 54, cardreader 26, receipt printer 44, keypad 32, as well as numerous otherdevices which are operative in the machine and controlled by thecontroller to carry out transactions. In the exemplary embodiment one ofthe transaction function devices in operative connection with thecontroller is a diagnostic article reading device 96 which is laterdiscussed in detail, and which is operative to read a diagnostic articleschematically indicated 98 used in servicing the machine. As laterexplained, in an exemplary embodiment the diagnostic article 98comprises a CD which can be read by reader 96 as well as computer device100 which is not generally associated with the operation of the ATM 10.

In the exemplary embodiment of ATM 10 the first fascia portion 20 andthe second fascia portion 22 are independently movably mounted on theATM housing 12. This is accomplished through the use of hinges attachedto fascia portion 20. The opening of the fascia lock 50 on the firstfascia portion 20 enables the first fascia portion to be moved to anopen position as shown in FIG. 5. In the open position of the firstfascia portion an authorized user is enabled to gain access to a firstportion 102 in the upper housing area 14. In the exemplary embodimentthere is located within the first portion 102 a chest lock input device104. In this embodiment the chest lock input device comprises a manualcombination lock dial, electronic lock dial or other suitable inputdevice through which a combination or other unlocking inputs or articlesmay be provided. In this embodiment, input of a proper combinationenables the chest door 18 to be moved to an open position by rotatingthe door about hinges 106. In the exemplary embodiment the chest door isopened once the proper combination has been input by manipulating alocking lever 108 which is in operative connection with a boltwork. Theboltwork which is not specifically shown, may be of a conventional orunconventional type that is operative to hold the chest door in a lockedposition until the proper combination is input. Upon input of thecorrect combination the locking lever enables movement of the boltworkso that the chest door can be opened. The boltwork also enables thechest door to be held locked after the activities in the chest portionhave been conducted and the chest door is returned to the closedposition. Of course in other embodiments other types of mechanical orelectrical locking mechanisms may be used. In the exemplary embodimentthe chest lock input device 104 is in supporting connection with agenerally horizontally extending dividing wall 110 which separates thechest portion from the upper housing portion. Of course this housingstructure is exemplary and in other embodiments other approaches may beused.

An authorized servicer who needs to gain access to an item, component ordevice of the ATM located in the chest area may do so by opening thefascia lock and moving the first fascia portion 20 so that the area 102becomes accessible. Thereafter the authorized servicer may access andmanipulate the chest lock input device to receive one or more inputs,which if appropriate enables unlocking of the chest door 18. The chestdoor may thereafter be moved relative to the housing and about itshinges 106 to enable the servicer to gain access to items, devices orcomponents within the chest. These activities may include for exampleadding or removing currency, removing deposited items such as envelopesor checks, or repairing mechanisms or electrical devices that operate toenable the machine to accept deposited items or to dispense currency.When servicing activity within the chest is completed, the chest doormay be closed and the locking lever 108 moved so as to secure theboltwork holding the chest door in a closed position. Of course thisstructure and service method is exemplary and in other embodiments otherapproaches may be used.

In the exemplary embodiment the second fascia portion 22 is also movablerelative to the housing of the machine. In the exemplary embodiment thesecond fascia portion 22 is movable in supporting connection with arollout tray 112 schematically shown in FIG. 3. The rollout tray isoperative to support components of the user interface thereon as well asthe second fascia portion. The rollout tray enables the second fasciaportion to move outward relative to the ATM housing thereby exposingcomponents and transaction function devices supported on the tray andproviding access to a second portion 114 within the upper housing andpositioned behind the second fascia portion. Thus as can be appreciated,when the second fascia portion is moved outward, the components on thetray are disposed outside the housing of the machine so as to facilitateservicing, adjustment and/or replacement of such components. Furthercomponents which remain positioned within the housing of the machine asthe rollout tray is extended become accessible in the second portion asthe second fascia portion 22 is disposed outward and away from thehousing.

In the exemplary embodiment the rollout tray 112 is in operativeconnection with a releasible locking device. The locking device isgenerally operative to hold the tray in a retracted position such thatthe second fascia portion remains in an operative position adjacent tothe upper housing area as shown in FIGS. 1, 2 and 3. This releasiblelocking mechanism may comprise one or more forms of locking typedevices. In the exemplary embodiment the releasible locking mechanismmay be released by manipulation of an actuator 116 which is accessibleto an authorized user in the first portion 102 of the upper housing 14.As a result an authorized servicer of the machine is enabled to move thesecond fascia portion outward for servicing by first accessing portion102 in the manner previously discussed. Thereafter by manipulating theactuator 116 the second fascia portion is enabled to move outward asshown in phantom in FIG. 11 so as to facilitate servicing components onthe rollout tray. Such components may include for example a printer orcard reader. After such servicing the second fascia portion may be movedtoward the housing so as to close the second portion 114. Such movementin the exemplary embodiment causes the rollout tray to be latched andheld in the retracted position without further manipulation of theactuator. However, in other embodiments other types of lockingmechanisms may be used to secure the rollout tray in the retractedposition. It should be understood that this approach is exemplary and inother embodiments other approaches may be used.

As best shown in FIG. 10 in which the components supported in the upperhousing are not shown, the delivery area 52 and the deposit acceptancearea 58 are in supporting connection with the chest door 18. As suchwhen the chest door 18 is opened, the delivery area 52 and the depositacceptance area 58 will move relative to the housing of the machine. Theexemplary embodiment shown facilitates servicing of the machine byproviding for the illumination for the transaction areas by illuminationsources positioned in supporting connection with the rollout tray 112.As best shown in FIG. 6, these illumination sources 118 are movable withthe rollout tray and illuminate in generally a downward direction. Inthe operative position of the second fascia portion 22 and the chestdoor 18, the illumination sources are generally aligned with apertures120 and 122 which extend through the top of a cover 124 which generallysurrounds the recessed pockets 60 and 56. As shown in FIG. 10 aperture120 is generally vertically aligned with window 68 and aperture 122 isgenerally aligned with window 70. In an exemplary embodiment apertures120 and 122 each have a translucent or transparent lens positionedtherein to minimize the risk of the introduction of dirt or othercontaminants into the interior of the cover 124.

As can be appreciated from FIGS. 6 and 11, when the chest door 18 isclosed and the second fascia portion 22 is moved to the operativeposition, the illumination sources 118 are positioned in generallyaligned relation with apertures 120 and 122. As a result theillumination of the illumination devices is operative to cause light tobe transmitted through the respective aperture and to illuminate thetransaction area within the corresponding recessed pocket.

In operation of an exemplary embodiment, the controller executesprogrammed instructions so as to initiate illumination of eachtransaction area at appropriate times during the conduct oftransactions. For example in the exemplary embodiment if the user isconducting a cash withdrawal transaction, the controller may initiateillumination of the delivery area 52 when the cash is delivered thereinand is available to be taken by a user. Such illumination draws theuser's attention to the need to remove their cash and will point out tothe user that the cash is ready to be taken. In the exemplary embodimentthe controller is programmed so that when the user takes their cash themachine will move to the next transaction step. After the cash is sensedas taken, the controller may operate to cease illumination of thedelivery area 56.

Likewise in an exemplary embodiment if a user of the machine indicatesthat they wish to conduct a deposit transaction, the controller maycause the machine to operate to initiate illumination of the depositacceptance area 58. The user's attention is drawn to the place wherethey must insert the deposit envelope in order to have it be accepted inthe machine. In the exemplary embodiment the controller may operate toalso illuminate the illumination panel 62 to illuminate the depositenvelope providing opening 48 so that the user is also made aware of thelocation from which a deposit envelope may be provided. In an exemplaryembodiment the controller may operate to cease illumination through thewindow 70 and/or the illumination panel 62 after the deposit envelope isindicated as being sensed within the machine.

In alternative embodiments other approaches may be taken. This mayinclude for example drawing the customer's attention to the particulartransaction area by changing the nature of the illumination in therecessed pocket to which the customer's attention is to be drawn. Thismay be done for example by changing the intensity of the light, flashingthe light, changing the color of the light or doing other actions whichmay draw a user's attention to the appropriate transaction area.Alternatively or in addition, a sound emitter, vibration, projecting PINor other indicator may be provided for visually impaired users so as toindicate to them the appropriate transaction area to which thecustomer's attention is to be drawn. Of course these approaches areexemplary and in other embodiments other approaches may be used.

As can be appreciated the exemplary embodiment enables one or moreillumination devices which are movable relatively with respect to thearea to be illuminated to be used without the need for additional movingwiring harnesses or other releasible connectors. In addition theexemplary location of the illumination device 118, extending on theunderside of the rollout tray 112 facilitates changing the illuminationdevice by extending the rollout tray in the manner previously discussedand as is shown in FIG. 11. Of course it should be understood that theprinciples described can be applied to numerous types of banking machinestructures and configurations which may be encompassed by the claimspresented herein.

As previously discussed the exemplary embodiment of ATM 10 is alsooperative to draw a user's attention at appropriate times to the cardreader slot 28. ATM 10 also includes features to minimize the risk ofunauthorized interception of card data by persons who may attempt toinstall a fraud device such as an unauthorized card reading device onthe machine. As shown in FIG. 14, the exemplary card slot 28 extendsthrough a card slot housing 66 which extends in generally surroundingrelation of the card slot. It should be understood that although thehousing 66 generally bounds the entire card slot, in other embodimentsthe principles described herein may be applied by bounding only one ormore sides of a card slot as may be appropriate for detectingunauthorized card reading devices. Further, it should be understood thatwhile the exemplary embodiment is described in connection with a cardreader that accepts a card into the machine, the principles beingdescribed may be applied to types of card readers that do not accept acard into the machine, such as readers where a user draws the cardthrough a slot, inserts and removes a card manually from a slot andother card reading structures.

In the exemplary embodiment the housing 66 includes a plurality ofradiation emitting devices 126. The radiation emitting devices emitvisible radiation which can be perceived by a user of the machine.However, in other embodiments the radiation emitting devices may includedevices which emit nonvisible radiation such as infrared radiation, butwhich nonetheless can be used for sensing the presence of unauthorizedcard reading devices adjacent to the card slot. In the exemplaryembodiment the controller operates to illuminate the radiation emittingdevices 126 at appropriate times during the transaction sequence. Thismay include for example times during transactions when a user isprompted to input their card into the machine or alternatively when auser is prompted to take their card from the card slot 28. In variousembodiments the controller may be programmed to provide solidillumination of the radiation emitting devices or may vary the intensityof the devices as appropriate to draw the user's attention to the cardslot.

In the exemplary embodiment the card slot housing 66 includes thereinone or more radiation sensing devices 128. The radiation sensing devicesare positioned to detect changes in at least one property of theradiation reflected from the emitting devices 126. The sensing devices128 are in operative connection with the controller. The controller isoperative responsive to its programming to compare one or more valuescorresponding to the magnitude and/or other properties of radiationsensed by one or more of the sensors, to one or more stored values andto make a determination whether the comparison is such that there is aprobable unauthorized card reading device installed on the fascia of themachine. In some embodiments the controller may be operative to executefuzzy logic programming for purposes of determining whether the natureof the change in reflected radiation is such that there has been anunauthorized device installed and whether appropriate personnel shouldbe notified.

FIG. 15 shows a side view of the housing 66. An example of a frauddevice which comprises unauthorized card reading device 130 is shownattached externally to the housing 66. The unauthorized card readingdevice includes a slot 132 generally aligned with slot 128. The device130 also includes a sensor shown schematically as 134 which is operativeto sense the encoded magnetic flux reversals which represent data on themagnetic stripe of a credit or debit card. As can be appreciated, anarrangement of the type shown in FIG. 15 enables the sensor 134 ifproperly aligned adjacent to the magnetic stripe of a card, to read thecard data as the card passes in and out of slot 128. Such anunauthorized reading device may be connected via RF or throughinconspicuous wiring to other devices which enable interception of thecard data. In some situations criminals may also endeavor to observe theinput of the user's PIN number corresponding to the card data so as togain access to the account of the user.

As can be appreciated from FIG. 15 the installation of the unauthorizedcard reading device 130 changes the amount of radiation from emittingdevices 126 and that is reflected or otherwise transmitted to thesensors 128. Depending on the nature of the device and its structure,the amount or other properties of radiation may increase or decrease.However, a detectable change will often occur in the magnitude or otherproperties of sensed radiation between a present transaction and a priortransaction which was conducted prior to an unauthorized card readingdevice being installed. Of course the sensing of the magnitude ofradiation is but one example of a property of radiation that may besensed as having changed so as to indicate the presence of anunauthorized reading device.

FIG. 16 demonstrates an exemplary simplified logic flow executed by acontroller for detecting the installation of an unauthorized cardreading device. It should be understood that this transaction logic ispart of the overall operation of the machine to carry out transactions.In this exemplary logic flow the machine operates to carry out cardreading transactions in a normal manner and to additionally execute therepresented steps as a part of such logic each time a card is read. Froman initial step 136 the controller in the machine is operative to sensethat a card is in the reader within the machine in a step 138. Generallyin these circumstances the controller will be operating the radiationemitting devices 126 as the user has inserted their card and the cardhas been drawn into the machine. In this exemplary embodiment thecontroller continues to operate the radiation emitting devices andsenses the radiation level or levels sensed by one or more sensors 128.This is done in a step 140.

The controller is next operative to compare the signals corresponding tothe sensed radiation levels to one or more values in a step 142. Thiscomparison may be done a number of ways and may in some embodimentsemploy fuzzy logic so as to avoid giving false indications due toacceptable conditions such as a user having their finger adjacent to thecard slot 28 during a portion of the transaction. In the case of auser's finger for example, the computer may determine whether anunauthorized reading device is installed based on the nature, magnitudeand changes during a transaction in sensed radiation, along withappropriate programmed weighing factors. Of course various approachesmay be used within the scope of the concept discussed herein. However,based on the one or more comparisons in step 142 the controller isoperative to make a decision at step 144 as to whether the sensedvalue(s) compared to stored value(s) compared in step 142 have adifference that is in excess of one or more thresholds which suggestthat an unauthorized card reading device has been installed.

If the comparison does not indicate a result that exceeds thethreshold(s) the ATM transaction devices are run as normal asrepresented in a step 146. Further in the exemplary embodiment, thecontroller may operate to adjust the stored values to some degree basedon the more recent readings. This may be appropriate in order tocompensate for the effects of dirt on the fascia or loss of intensity ofthe emitting devices or other factors. This is represented in a step148. In step 148 the controller operates the ATM to conduct transactionsteps in the usual manner as represented in a step 150.

If in step 144 the difference between the sensed and stored valuesexceeds the threshold(s), then this is indicative that an unauthorizedcard reading device may have been installed since the last transaction.In the exemplary embodiment when this occurs, the controller isoperative to present a warning screen to the user as represented in astep 152. This warning screen may be operative to advise the user thatan unauthorized object has been sensed adjacent to the card reader slot.This may warn a user for example that a problem is occurring.Alternatively if a user has inadvertently placed innocently some objectadjacent to the card reader slot, then the user may withdraw it. Inaddition or in the alternative, further logic steps may be executed suchas prompting a user to indicate whether or not they can see theradiation emitting devices being illuminated adjacent to the card slotand prompting the user to provide an input to indicate if such items arevisible. Additionally or in the alternative, the illuminating deviceswithin the housing 66 may be operative to cause the emitting devices tooutput words or other symbols which a user can indicate that they cansee or cannot see based on inputs provided as prompts from outputdevices of the machine. This may enable the machine to determine whetheran unauthorized reading device has been installed or whether the sensedcondition is due to other factors. It may also cause a user to note theexistence of the reading device and remove it. Of course variousapproaches could be taken depending on the programming of the machine.

If an unauthorized reading device has been detected, the controller inthe exemplary embodiment will also execute a step 154 in which a statusmessage is sent to an appropriate service provider or other entity toindicate the suspected problem. This may be done for example through useof a system like that shown in U.S. Pat. No. 5,984,178 the disclosure ofwhich is incorporated herein by reference. Alternatively messages may besent to system addresses in a manner like that shown in U.S. Pat. No.6,289,320 the disclosure of which is also incorporated herein byreference. In a step 156 the controller will also operate to record dataidentifying for the particular transaction in which there has beensuspected interception of the card holder's card data. In addition or inthe alternative, a message may be sent to the bank or other institutionalerting them to watch for activity in the user's card account forpurposes of detecting whether unauthorized use is occurring.Alternatively or in addition, some embodiments may include card readersthat change, add or write data to a user's card in cases of suspectedinterception. Such changed data may be tracked or otherwise used toassure that only a card with the modified data is useable thereafter.Alternatively or in addition, in some embodiments the modified card maybe moved in translated relation, moved irregularly or otherwise handledto reduce the risk that modified data is intercepted as the card isoutput from the machine. Of course these approaches are exemplary ofmany that may be employed.

In the exemplary embodiment the ATM is operated to conduct a transactioneven in cases where it is suspected that an unauthorized card readingdevice has been installed. This is represented in a step 158. However,in other embodiments other approaches may be taken such as refusing toconduct the transaction. Other steps may also be taken such as capturingthe user's card and advising the user that a new one will be issued.This approach may be used to minimize the risk that unauthorizedtransactions will be conducted with the card data as the card can bepromptly invalidated. Of course other approaches may be taken dependingon the programming of the machine and the desires of the systemoperator. In addition while the fraud device shown is an unauthorizedcard reading device, the principles described may also be used to detectother types of fraud devices such as for example false fascias, userinterface covers and other devices.

In some embodiments additional or alternative features and methods maybe employed to help detect the presence of unauthorized card readingdevices or other attempted fraud devices in connection with the ATM. Forexample in some embodiments an oscillation sensor may be attached to themachine to detect changes in frequency or vibration that result from theinstallation of unauthorized devices on the ATM. FIG. 15 showsschematically an oscillator 127 attached to the interior surface of theATM fascia. Oscillator 127 may be operative responsive to the controllerand suitable vibration circuitry to impart vibratory motion to thefascia in the vicinity of the card reader slot. A sensor 129 is inoperative connection with the fascia and is operative to sense at leastone parameter of the motion imparted to the fascia by the oscillator127. Although oscillator 127 and sensor 129 are shown as separatecomponents, it should be understood that in some embodiments thefunctions of the components may be performed by a single device.

The sensor 129 is in operative connection with the controller of the ATMthrough appropriate circuitry. The controller selectively activates theoscillator and the sensor 129 is operative to sense the resultingmovement of the fascia caused by the oscillation. The installation of anunauthorized card reading device or other fraud device on the ATM willgenerally result in a change in at lest one property being sensed by thesensor 129. This may include changes in amplitude, frequency or both.Alternatively or in addition, some embodiments may provide for theoscillator to impart vibration characteristics of various types orvibratory motion through a range of frequencies and/or amplitudes.Sensed values for various oscillatory driving outputs may then becompared through operation of the controller to one or more previouslystored values. Variances from prior values may be detected or analyzedthrough operation of the controller and notifications given insituations where a change has occurred which suggests the installationof an unauthorized device.

In some embodiments the controller may cause the oscillator and sensorto operate periodically to sense for installation of a possibleunauthorized device. Alternatively, the controller may cause such acheck to be made during each transaction. Alternatively in someembodiments oscillation testing may be conducted when a possibleunauthorized device is detected by sensing radiation properties. Thecontroller may operate to take various actions in response to sensing apossible unauthorized reading device through vibration, radiation orboth. For example detecting a possible fraud device by both radiationand oscillation may warrant taking different actions than only detectinga possible fraud device through only one test or condition.

In some embodiments the controller may be programmed to adjust thethresholds or other limits used for resolving the presence of a possiblefraud device for responses to changes that occur over time at themachine. This may include for example adjusting the thresholds forindicating possible fraud conditions based on the aging of theoscillator or the sensor. Such adjustments may also be based onparameters sensed by other sensors which effect vibration properties.These may include for example, the fascia temperature, air temperature,relative humidity and other properties. Of course readings from theseand other sensors may be used to adjust thresholds of the oscillationsensor, radiation sensor or other fraud device sensors. Variousapproaches may be taken depending on the particular system.

In some embodiments the oscillator may additionally or alternatively beused to prevent the unauthorized reading of card reader signals. Thismay be done for example when the banking machine has a device whichtakes a user card into the machine for purposes of reading data on thecard. In such embodiments the controller may operate to vibrate the areaof the fascia adjacent to the card reader slot when a user's card ismoving into and/or out of the slot. In such cases the vibration may beoperative to cause the generation of noise or inaccurate reading by anunauthorized card reading sensor so as to make it more difficult tointercept the card stripe data using an unauthorized reading device. Insome embodiments such vibration may also serve to disclose or make moreapparent the presence of unauthorized card reading devices. Of coursethese approaches are exemplary and in other embodiments other approachesmay be used.

In other embodiments other or additional approaches to detectingfraudulent reading or other improper activities may be used. Forexample, in some embodiments the fascia of the banking machine may besubject to observation within a field of view of one or more imagingdevices such as camera 131 schematically represented in FIG. 15. Camera15 may be in operative connection with an image capture system of thetype shown in allowed U.S. patent application Ser. No. 09/414,249 filedOct. 7, 1999 the disclosure of which is incorporated herein byreference.

In some embodiments the ATM controller or a connected system may beoperative to capture images of the fascia of the ATM or portionsthereof. The system may be programmed to compare the fascia or selectedportions thereof with image data previously captured. If a sufficientdifference in the image data is sensed relative to prior image data, thecontroller or a connected server may be operative to send a messageand/or provide image data to a remote observer through a network toenable observation of an unauthorized device on the ATM fascia. Forexample, in some embodiments the system may be operative to compareimage data related for the fascia when the banking machine is not beingconducted by a user. The system may be operative to compare image datafor the fascia or selected portions thereof and execute a sequence ofactions responsive to differences in image data. The sequence mayinclude for example moving image data in temporary storage in connectionwith the image capture system to more permanent storage, givingnotifications to remote systems addresses, having the controller conductother tests to determine if an unauthorized card reading device has beeninstalled, such as sensing radiation or oscillation. Alternativelyoperation of the banking machine may be suspended pending investigation.Of course, these approaches are merely exemplary.

In the alternative or in addition, the controller or one or morecomputers associated with the image capture system may include softwarefor capturing and comparing topographical features and relationships ofthe ATM fascia. Such a system may operate to initially capture suchfeatures of the ATM fascia, and thereafter compare the sensed featuresto the original topographical features. This may be accomplished in amanner comparable to that used for human facial recognition or othercomparisons of biometric features. Upon sensing a change in the data thecontroller may be operating to take programmed steps of the typepreviously discussed.

In some embodiments the controller and/or image capture system may beoperative to execute sequences of activities responsive to triggeringevents that may be associated with attempts to install or operate frauddevices. For example, the presence of a person in front of the bankingmachine may be sensed through image analysis, weight sensors, sonicdetectors or other detectors. The person remaining in proximity to themachine for a selected period or remaining too long after a transactionmay constitute a triggering event which is operative to cause the systemto take actions in a programmed sequence. Such actions may includecapturing images from one or more additional cameras and/or moving imagedata from one or more cameras from temporary to more permanent storage.The sequence may also include conducting an analysis of all or portionsof image data from the fascia to try to detect tampering or improperdevices. Radiation or vibration tests may also be conducted as part of asequence. Notifications and/or images may also be sent to certainentities or system addresses. Of course these actions are exemplary.

Alternatively or in addition, triggering events associated withsequences may include sensed ATM conditions or malfunctions that may beassociated with tampering or the installation of fraud devices. Forexample, sensing an object at an entry slot to a card reader, or placingan object to open a shutter at the entrance of a card reader slot,without a card being read within a defined time thereafter may beindicative of an attempt to install an unauthorized reading device. Suchsensed conditions may serve as a triggering event for executing asequence. Also, if the ATM experiences what appears to be a card readfailure, or two consecutive failures, this could be an indication thatan unauthorized card read device has been installed and may serve as atriggering event for execution of a sequence.

Alternatively or in addition, if the banking machine senses inputs tothe keypad and/or function keys at times not corresponding to anappropriate time for such inputs during a transaction, this may be anindication that a fraud device has or is being installed. An indicationby the ATM that cash was presented to a user but not taken may also bean indication that a fraud device is installed or ATM tampering hasoccurred. Situations where receipts are frequently presented to themachine user but not sensed as taken may also indicate the presence of afraud device. Such events may serve as triggering events for executing asequence that results in further analysis for detection of frauddevices, the capture of images, the sending of messages, taking thebanking machine out of service or the initiation of other actions whichare part of a programmed sequence.

In some exemplary embodiments the controller of the ATM or otherconnected computers may be operatively programmed to analyze conditionsthat are sensed and to determine based on the sensed conditions that afound device is installed. Such a programmed controller may be operativeto apply certain rules such as to correlate the repeated sensing ofabnormal conditions with a possible fraud or tampering condition and toconduct tests for the presence of fraud devices. Such events mayconstitute soft triggers for sequences or other actions to detect andreduce the risk of fraud devices. Of course these approaches are merelyexemplary and in other embodiments other approaches may be used.

The exemplary embodiment of the ATM 10 is a machine that is generallyconstructed for outdoor use and operation. As such it may be subjectedto extremes of temperatures. However, the components of the ATM such asthe controller, currency dispenser, display and other items may besensitive to temperature and may begin to malfunction if the temperaturewithin the housing of the machine becomes too hot or too cold.

In the exemplary embodiment the display 36 comprises a high illuminationflat panel type display. Some types of such displays generateconsiderable heat which if not properly dissipated can cause hightemperatures and damage components of the machine. In the exemplaryembodiment the risk of such damage is reduced by providing air flowcooling through the housing of the machine, and specifically byproviding air flow inside the housing within the area adjacent thedisplay 36.

As shown in FIG. 6, the exemplary embodiment of ATM 10 includes an aircooling opening 160. In the exemplary embodiment the air cooling opening160 extends between the top wall 162 of the second fascia portion 22 anda baffle structure 164 which is fixedly attached to the housing of themachine. As further explained in detail hereafter, the baffle structure164 is operative to enable cooling air flow to pass through the housingaround the rear and sides of the display 36 and to pass out of thehousing through the opening 160. However, the exemplary baffle structureis operative to minimize the risk of infiltration of moisture such asliquid water, droplets, snow, condensation and other contaminants intothe interior area of the housing. Further, the exemplary bafflestructure is adapted to direct contaminants to the outside of thehousing so as to avoid the accumulation thereof on the baffle.

The exemplary baffle structure 164 is shown in greater detail in FIG. 7.The exemplary baffle structure includes a vertically extending wallportion 166 that extends upward adjacent to the machine housing. Asshown in FIG. 7 in the exemplary baffle structure, the verticallyextending wall portion 166 extends above the generally flat top surface168 of the housing. The exemplary baffle 164 further includes an arcuatesurface 170. The arcuate surface 170 extends generally forward of thewall portion 166. In the operative position of the rollout tray 112represented in FIG. 6, the arcuate surface 170 overlies the display 36in a generally shroud like fashion.

In the exemplary embodiment the arcuate surface 170 has at the forwardand side peripheries thereof, a lip 172. The lip 172 is operative tocatch and direct moisture and other contaminants that may collect on thebaffle toward the area of the baffle adjacent to the wall 166. Furtheras shown in FIG. 7, the arcuate surface 170 is generally angled todirect moisture toward the wall surface.

Positioned adjacent to the wall surface 166 is a moisture collectingtrough 174. The moisture collecting trough is operative to capturemoisture and other contaminants that move toward the wall and to directthem to the side of the arcuate surface and to the exterior of thehousing in a manner that is later discussed. In the exemplary embodimentof the baffle structure 164, there are a plurality of fin portions 176that extend generally outward from the arcuate surface 170. The finportions 176 are generally disposed forward away from the wall 166 so asto avoid interfering with the flow of material through the moisturecollecting trough 174. As can be appreciated the fin portions areoperative to direct air flow which passes across the baffle as well asto minimize the potential cross flow of moisture across the arcuatesurface except in the area of the moisture collecting trough.

As shown in FIG. 8 when the second fascia portion 122 is moved to theoperative position, the air cooling opening 150 extends generallybetween the top wall 162 of the second fascia portion and the forwardface of the vertically extending wall portion 166. This elongatedopening provides sufficient area for air flow as required formaintaining the interior of the housing within the desired temperaturerange. Further, the configuration of the fascia portion 22 and thebaffle structure 164 in the operative position causes the moisturecollecting trough to direct moisture and contaminants collected thereinto the outside of the ATM housing through a base area 178 of the aircooling opening. This minimizes the opportunities for water and othercontaminants to collect within the machine. As will be appreciated, thesecond fascia portion 22 and baffle structure 164 are symmetrical andthus the exemplary structure enables contaminants to exit from thehousing of the machine on both sides of the fascia portion 22.

As shown in FIG. 9 the exemplary embodiment facilitates air flow throughthe machine for cooling purposes by providing an air opening 180 at therear of the chest portion. As can be appreciated the air opening isappropriately protected so as to prevent attack therethrough into thechest area of the housing. The air opening is operatively connectedthrough appropriate filters or other devices to one or more blowers 182.The blowers are operative to provide forced air flow through thehousing. In addition in exemplary embodiments heating and coolingdevices may also be provided in proximity to the blowers so as tofacilitate maintaining appropriate temperatures within the housing. Suchdevices may include for example, heat pumps, Peltier devices and othersuitable devices for cooling, heating or otherwise conditioning air thatflows through the housing. Appropriate sensors and other controls may beoperated within the housing to maintain the components in the housingwithin a suitable temperature and/or humidity range.

In the exemplary embodiment a duct 184 is provided between the chestarea 16 and the upper housing portion 15. The duct 184 enables air flowbetween the chest and upper housing portions so as to facilitate thecooling or heating of components in both sections of the housing. As canbe appreciated for purposes of maintaining the display in an appropriatetemperature condition, air may be passed from the air opening 180 andthrough the duct 184 into the upper housing area. The positive pressureproduced by the blower and the upper housing area causes air flowthrough the upper housing portion and through the air cooling opening160. In such circumstances air is directed around the rear and sides ofthe display 36 past the baffle structure 164 and out the opening 160.Alternatively under appropriate circumstances the blowers may beoperated to reverse the air flow in which case the heat generated by adisplay may be captured within the machine so as to supplement theheating capabilities of heaters within the machine to avoid componentsfrom becoming too cold. As can be appreciated in some embodiments thecontroller of the machine or other controllers may be operated tocontrol the direction and rates of the blowers as well as the heatingand cooling devices so as to maintain the interior of the housing withinthe appropriate temperature range. In the exemplary embodiment thestructure of the display, baffle structure and second fascia portionfacilitate cooling (and heating) the display and other components whileminimizing the risk of the introduction of contaminants into themachine.

As can also be appreciated from the previous discussion, the bafflestructure 164 is mounted in generally fixed relation with the housing.As a result the extension of the rollout tray 112 enables the displayand other components supported on the tray to be extended outside thehousing and away from the baffle so as to facilitate servicing. Oncesuch servicing is conducted the tray and second fascia portion may beretracted so that the display again moves in underlying relation of thebaffle and with the baffle extended in intermediate relation between thedisplay and the air cooling opening 160 so as to provide protection. Ofcourse it should be understood that these structures are exemplary andin other embodiments other approaches may be used.

In the exemplary embodiment the ATM 10 is provided with enhanceddiagnostic capabilities as well as the ability for servicers to morereadily perform remedial and preventive maintenance on the machine. Thisis accomplished in an exemplary embodiment by programming the controllerand/or alternatively distributed controllers and processors associatedwith the transaction function devices, to sense and capture diagnosticdata concerning the operation of the various transaction functiondevices. In an exemplary embodiment this diagnostic data includes morethan an indication of a disabling malfunction. In some embodiments andwith regard to some transaction function devices, the data may includefor example instances of speed, intensity, deflection, vacuum, force,friction, pressure, sound, vibration, wear or other parameters that maybe of significance for purposes of detecting conditions that may bedeveloping with regard to the machine and the transaction functiondevices contained therein. The nature of the diagnostic data that may beobtained will depend on the particular transaction function devices andthe capabilities thereof as well as the programming of the controllerswithin the machine.

In the exemplary embodiment the controller is operative to process datarepresentative the condition of the various transaction function devicesand to store such information in one or more data stores in a protectedform. In an exemplary embodiment the protected form of the informationis such that persons who are not authorized and do not have a suitablediagnostic article are not able to obtain access to such data. Thenature of the protection used for the data may include in some casesencryption, storing such data in a memory device which erases the datain the event of tampering, and/or using other forms of protection so asto prevent access to such data by unauthorized persons.

In an exemplary embodiment authorized servicers are enabled to utilizethe diagnostic data and to facilitate remedial and preventivemaintenance on the machine by being issued a diagnostic article such asdiagnostic article 98 previously mentioned in conjunction with FIG. 4.In the exemplary embodiment the diagnostic article is computer readablemedia such as a CD which may be operatively engaged with a diagnosticarticle reading device 96 such as a CD drive. Of course it should beunderstood that in other embodiments the diagnostic article may haveother forms and may include for example a portable terminal such as aPDA or cell phone or may be a portable storage device such as a plug inUSB memory module or smart card.

In the exemplary embodiment engaging the diagnostic article in operativeconnection with the controller enables a servicer to obtain access tothe diagnostic data as well as to access information from the articlewhich provides an indication of the significance of the diagnostic databeing received. In an exemplary embodiment the diagnostic articleincludes service manual data which can be output through an outputdevice of the ATM or other terminal, and which a servicer can utilize ina manner similar to repair instructions and other information which areusable to conduct servicing operations on the ATM. Further, in anexemplary embodiment, the diagnostic article includes diagnosticinstructions that are operative to interpret results of diagnostic testsor operations that can be performed through operation of the controller.

In the exemplary embodiment the diagnostic article includes instructionswhich may be utilized by and interact with the controller of themachine. This enables the servicer to utilize the diagnostic data aswell as service data from the diagnostic article to provide outputindicia through an output device which may suggest to a servicer certaindiagnostic tests. The controller may then be operated to enable a userto provide inputs through one or more input devices of the machinecorresponding to such diagnostic tests. These diagnostic instructionswhich are included in the service data on the diagnostic article causethe controller to interact with the transaction function devices and toproduce one or more results. Responsive to such results the controllerin the machine is operative to cause the output of indicia which mayindicate the result(s) to a servicer. Further responsive to theresult(s) and the service data on the diagnostic article, the controllermay operate to cause the output of indicia corresponding to otherdiagnostic tests which may be conducted as well as service or remedialactions which a servicer should consider taking in order to fix existingproblems or minimize the risk of future ones. In an exemplary embodimentthe service data included in the diagnostic article can be used to guidea servicer through service activities as well as to interact with thecontroller and provide servicer interaction at the machine so as toobtain test results and enable diagnosis of conditions within themachine. In addition, the exemplary embodiment of the service articlewhen in operative connection with the controller, enables the output ofindicia which may comprise textual, aural or graphical information so asto facilitate servicing activities at the machine by the servicer.

In the exemplary embodiment of the service article, the article providesto the controller one or more secret codes, commands, results or otherthings, all of which are referred to herein for brevity as secret codes.Such secret codes are analyzed through operation of the controller todetermine if the diagnostic article is authorized. In some embodimentsthe controller may operate to require a user to input information whichis utilized in making a determination as to whether the article isauthorized. Such input user information may include for example, inputcodes to input devices on the machine or biometric inputs. In additionor in the alternative the secret codes which are derived from thediagnostic article may be time, machine or device specific. For example,the particular diagnostic article may have secret codes which indicatethat it is operative only during certain time periods or before or aftera particular date. The controller in the ATM may operate to carry out acalendar function which provides a current date. The ATM controller mayutilize the secret codes from the diagnostic article to produce one ormore values which are compared to verification data which is producedresponsive to time or date data so as to produce a comparison result.The controller may thereafter enable the output of diagnostic data orsignificance data for the performance of activities based on thecomparison result indicating that the diagnostic article and/or user areauthorized.

In some exemplary embodiments the service data included in thediagnostic article may be encrypted. Such encryption may include variousstandard or nonstandard techniques so as to reduce the risk ofunauthorized users being able to access such service data. In theexemplary embodiment the controller at the ATM is operative to decryptthe service data so as to enable its utilization in conductingdiagnostic activities and to enable the output of indicia correspondingthereto through output devices either on the machine or through anoutput device at a separate terminal.

Further in some exemplary embodiments the diagnostic article may includebrowser software. Such browser software may be loaded to the controllerin the ATM and may be operative therein to provide output indicia as aresult of processing the service data through the browser. In someembodiments such a browser may be programmed to interpret embeddedinstructions in the service data that do not conform to publishedstandards and/or which are generally nonpublic. Such embeddedinstructions may be processed by the browser so as to output indiciausable in servicing the machine as well as to cause the controller tointeract with transaction function devices within the machine so as toconduct diagnostic activities. The use of such nonstandard browsersoftware further enhances security associated with the diagnosticarticle as well as the machine.

In addition in some embodiments the diagnostic article and/or the datastored in the ATM may contain instructions so as to prevent continuedoperation of the browser software and/or retention of the service datafrom the diagnostic article in memory after the diagnostic article isoperatively disconnected from the controller. Such instructions may beutilized to minimize the risk that service data from the diagnosticarticle, the browser software or other instructions contained therein,continue to be operational in the machine after the authorized servicerhas removed the diagnostic article from operative connection with thecontroller.

In addition in some exemplary embodiments the diagnostic article may beconfigured such that it may be used in conjunction with computer devicesother than an automated banking machine. For example in circumstanceswhere the diagnostic article includes service manual data, authorizedusers may be able to utilize the diagnostic article to obtain electronicservice manual documentation from a computing device such as a notebookcomputer, PDA or cell phone. In such circumstances diagnosticinstructions included in the diagnostic article that would otherwiseinteract with the machine controller and/or transaction function devicesincluded in the ATM, will not be operative in another type of computingdevice. In such exemplary embodiments it may be appropriate however toprevent access to the service manual data contained on the diagnosticarticle unless the secret codes are determined to be appropriate throughcorrespondence with time data inputs from a user or other appropriateverification data which indicates that access to the service manual datais authorized.

It should be understood that these approaches and techniques areexemplary and in other embodiments other approaches, techniques andcapabilities may be used.

FIGS. 12 and 13 show an exemplary schematic logic flow associated withverifying the authorized character of the diagnostic article such as aCD in an ATM. It should be appreciated that in the exemplary embodimentthe diagnostic article reading device such as the exemplary CD reader 96will generally be positioned within the housing of the ATM and may bewithin the secure chest so that only authorized service personnel areable to gain access thereto. This may further help to assure that onlythose who may properly gain access to the interior portions of thehousing may conduct the service activity which may include being able toaccess valuable documents, sensitive customer data or other information.

As represented in FIG. 12, once a servicer has gained access to thediagnostic article reading device, the controller may operate in a step186 to provide output indicia through an output device of the ATMprompting a servicer to provide an input to enter a diagnostics mode. Ifin a step 188 an input to enter the diagnostics mode is provided, thecontroller is then operative to check if a diagnostic article disk ispresent in a step 190. If no disk is present in the diagnostic articlereading device, the controller is operative to provide indicia throughan output device indicating to the service user that no disk is present.This is done at a step 192 when the controller returns the logic to theprompting step 186.

If a diagnostic article is determined to be present in a step 190, thecontroller is operative to cause data to be read from the article in astep 194. In the exemplary embodiment the diagnostic article providessecret codes which are also encrypted and the controller is operative todecrypt the data to a usable form in a step 196. In step 196 thecontroller is operative to compare data corresponding to at least one ofthe secret codes for verification data for purposes of making adetermination as to whether the diagnostic article is valid. This isdone in a step 198. As previously discussed, the verification data invarious embodiments may be derived from information stored in memory inthe machine, date data, inputs provided by a user or other data which isoperative to generally reliably verify that the diagnostic article isauthorized and is being used within the scope of its permitted use. Ifin step 198 it is determined that the diagnostic article is invalid,indicia is output to the user through an output device of the machine toindicate that the diagnostic article is invalid. This is done at a step200 and the logic returns to the prompting step.

If in step 198 the disk is determined to be valid, the exemplaryembodiment causes the controller to operate in accordance with itsprogramming to provide output indicia which prompts the user to input IDdata. This is done at a step 202. The user then provides at least oneinput to at least one input device on the ATM at a step 204. Thecontroller is then operative to cause a verification step 206 to beexecuted to determine if the ID input by the user is valid. In variousembodiments the determination as to whether the user ID is valid may bebased on the secret code data, date data, stored data or combinations orrelationships thereof which operate to assure that access is limited toauthorized users. If the input from the user is determined not to bevalid, the controller is operative to output indicia indicative thereofto an output device as represented at a step 208 when the controllerreturns the logic flow.

If the user ID data input is valid as determined in step 206, thecontroller is operative to read the diagnostic article. As previouslydiscussed in some embodiments this may include loading browser softwarefrom the diagnostic article into a memory in operative connection withthe controller. Alternatively or in addition this may also involvedecrypting encrypted service data or instructions from the diagnosticarticle. In the exemplary embodiment such activities are carried out andthe controller operates to display a menu responsive to the service dataincluded on the diagnostic article. This is done in a step 210.

In the exemplary embodiment of the diagnostic article, the controller inthe ATM or the processor of the computer device in cases where thediagnostic article is not being used in the ATM, is operative to operateto execute a testing step to determine if the diagnostic article is inoperative connection with an ATM. This is represented as a step 210 inFIG. 13. In the exemplary embodiment the diagnostic article containsinstructions which enable the accessing of diagnostic data stored in theATM and enable the utilization thereof in connection with conductingservice activities. If such diagnostic data and transaction functiondevices are not present in a computing device, because it is not an ATM,logic flow which may be derived at least in part from instructions onthe diagnostic article, varies to accommodate use in the non-ATMcomputing device. For purposes of carrying on the description of thelogic flow it will be presumed that the determination in step 210properly indicates in the circumstances described that the diagnosticarticle is in operative connection with the ATM. This then causes thecontroller in the ATM to operate responsive to the diagnostic article torender diagnostic data accessible as well as to provide output indiciacorresponding to menu options and selections which are available forconducting activities at the ATM.

Responsive to the outputs produced responsive to operation of thecontroller through output devices on the ATM, and which provide optionsfor the servicer, the servicer then makes appropriate selections asrepresented in a step 212. This may include for example a selectionindicating that the servicer wants to determine the nature of anyanomalies which currently exist or which have existed in the operationof transaction function devices in the ATMs. Of course other options forthe servicer may also be provided in accordance with the programming ofthe controller and instructions on the diagnostic article.

In response to a user indicating that they wish to receive informationabout malfunctions or anomalies in the operation of the ATM, thecontroller is operative to cause indicia to be output through an outputdevice on the machine corresponding to such information as well assuggested diagnostic tests that could be performed at the ATM in orderto determine the cause or nature of the malfunction or anomaly. This isrepresented in a step 214. In response to the output the servicerprovides an input indicative of the action that the servicer wishes tohave conducted. This input may be provided through one or more inputdevices on the ATM. Such input devices may be included in a specialservicer interface, but in some embodiments input devices of the ATMgenerally used by consumers may be used for this purpose.

Inputs from the servicer in step 216 would generally cause thecontroller to interact with one or more transaction function devices tocarry out a diagnostic test and to receive at least one result of thetest. This is represented by a step 218. Responsive to the result of thediagnostic test, the controller is operative responsive to the servicedata to provide output indicia to the servicer. This output indicia mayinclude information on the outcome of the test or may indicate thatfurther tests should be conducted. This is represented by a step 220.Such further steps may be carried out as appropriate for purposes ofdiagnosing the particular condition(s) of interest in the machine. Thesefurther steps may involve in the exemplary embodiment, receivinginstructions from the servicer. The controller responsive thereto,interacts with the transaction function devices in the machine and theservice data from the diagnostic article so as to direct the diagnosticactivities. Such activities are schematically represented through aseries of steps indicated 222.

By the controller operating responsive to the service data and thediagnostic data, the fault or other condition which is sought to bedetected, corrected or otherwise addressed will be accomplished. This isrepresented in a step 224. Once this is accomplished in the exemplaryembodiment, a servicer may conduct additional diagnostic activity byinteracting with the machine. However, in this exemplary series ofsteps, it will be considered that the servicer has completed hisactivities and wishes to return the machine to service. In doing thisthe servicer will provide appropriate inputs to the machine and willremove the diagnostic article from operative connection with thecontroller. This is represented in a step 226. Such action is operativeto take the ATM out of the diagnostics mode and to again prevent accessto diagnostic data within the machine. Such action will also generallycease the operation of the special browser software associated with theservice article as well as diagnostic programs which are only operatedwhen the service article is engaged with the machine. Thereafter thecontroller operates to return control of the ATM machine to theapplication. This is represented in a step 228.

As can be appreciated, the exemplary embodiment provides for the servicedata such as diagnostic instructions and other diagnostic activitiesthat may be described in service manuals or other instructions or data,to interact with the controller of the machine. In the exemplaryembodiment this enables a servicer not only to receive indiciacorresponding to what a servicer should do in order to conduct aparticular test, but also to provide instructions to the controllerbased on the service data so that the controller can conduct a test.Further in appropriate situations, the result of the test may beutilized to direct a servicer within the service data to the appropriateremedial action or to conduct a different test so as to complete theservicing activity as quickly as possible. Such capabilitiesparticularly when combined with the availability of the diagnostic dataconcerning transaction function devices stored in the machine, enablesmore accurate and rapid identification and correction of problems sothat the machine may be returned to service.

As previously mentioned in the exemplary embodiment provision is alsomade such that the diagnostic article may be operated as an electronicservice manual within a computer device other than an ATM.

As shown in FIGS. 12 and 13, access to service data included on theservice article may be restricted in a manner similar to that providedwhen the service article is used in conjunction with an ATM. This isdone through appropriate programming and interaction with a non-ATMcomputer device. However, as indicated in step 210, when it isdetermined that the service article is not operating within an ATM, theexemplary service article operates in a display mode only as indicatedat a step 230. In the display mode the service data is provided to auser in a manner similar to an electronic service manual. Thus the usermay be able to browse selectively through the information reviewing thetextual material and diagrams associated therewith. However, when thediagnostic article is operated in display mode only, diagnosticinstructions that would otherwise cause the controller of the ATM tointeract with transaction function devices are not operative to performfunctions within the computer devices. It should be appreciated,however, that being able to use the exemplary diagnostic article inconjunction with another type of computer device may facilitateservicing in some circumstances. In some embodiments the controller maybe programmed to provide network access to diagnostic capabilities to aremote computer device. Such capabilities may be provided in somecircumstances when the diagnostic article is installed or otherwiseoperative in the remote computer device. This may avoid the need in someembodiments for a servicer to travel to the machine to physicallyconnect the diagnostic article in operative connection with an articlereading device such as a reader. Rather, the diagnostic activities maybe conducted remotely so as to facilitate identifying any issues andminimizing machine downtime.

It should be understood that although in the exemplary embodiment thediagnostic article is described as a CD or other read-only device, inother embodiments the diagnostic article may be another type of device.This may include, for example, a portable terminal such as a notebookcomputer, PDA, cell phone or other suitable article which can beverified as genuine and which can provide the service data and theinstructions to facilitate carrying out diagnostic activities.

In some alternative embodiments the diagnostic article may be utilizedin a system that enables remote communication with the ATM. For example,the diagnostic article may be utilized in conjunction with a remotecomputer that is operatively connected to the ATM through a network. Insome examples the operation and logic may be similar to that previouslydescribed except that instead of the diagnostic article being adjacentto the ATM it communicates with the ATM controller through the network.In some embodiments the messages through the network may be encrypted toprovide enhanced security.

For example in some embodiments the controller may be programmed so thata diagnostic article which is a CD, hard disk or other computer readablemedia resides on a computer remote from the ATM. The remote computerincludes output and input devices that operate to provide outputs andinputs similar to that previously described when diagnosing conditionsat the ATM. In this way a remote servicer may diagnose and possiblychange, adjust or correct conditions at the ATM. In some embodiments theservice manual data and diagnostic data may also be utilized by theremote servicer in conjunction with the service activities. The one ormore secret codes or other means used to gain access to diagnostic dataand other values or functions may be those from the diagnostic articleand/or inputs by the user to the remote computer, or may be a functionof other values from the user and/or remote computing device. In someembodiments the ability to conduct service activity locally or remotelymay be provided to facilitate servicing of the ATM.

Thus, the features and characteristics of the embodiments previouslydescribed achieve desirable results, eliminate difficulties encounteredin the use of prior devices and systems, solve problems and may attainone or more of the objectives stated above.

In the foregoing description certain terms have been used for brevity,clarity and understanding, however no unnecessary limitations are to beimplied therefrom because such terms are for descriptive purposes andare intended to be broadly construed. Moreover, the descriptions andillustrations herein are by way of examples and the invention is notlimited to the details shown and described.

In the following claims any feature described as a means for performinga function shall be construed as encompassing any means capable ofperforming the recited function, and shall not be deemed limited to theparticular means shown in the foregoing description or mere equivalentsthereof.

Having described the features, discoveries and principles of theinvention, the manner in which it is constructed and operated, and theadvantages and useful results attained; the new and useful structures,devices, elements, arrangements, parts, combinations, systems,equipment, operations, methods, processes and relationships are setforth in the appended claims.

1. A method comprising the following steps carried out responsive tooperation of at least one computer: (a) emitting radiation from at leastone radiation emitting device of an automated banking machine, whereinthe automated banking machine includes a user interface and a cashdispenser; (b) sensing radiation emitted in (a); (c) capturing firstimage data corresponding to the user interface; (d) storing the firstimage data; (e) subsequent to (c), determining that a person is inproximity to the user interface; (f) subsequent to (e), determining thata person is not in proximity to the user interface; (g) responsive to(f), capturing second image data corresponding to the user interface;(h) comparing the second image data captured in (g) and the first imagedata captured in (c), wherein the comparing includes a topographicalcomparison; (i) responsive to (h) resulting in met topographicaldifferences, executing a sequence of actions including: (i1) emittingradiation from the at least one radiation emitting device; (i2) sensingradiation emitted in (i1); (i3) comparing the radiation sensed in (i2)with the radiation sensed in (b); (j) responsive to (i3) resulting inmet sensed radiation differences, determining that the machine has afraud condition corresponding to installation of an unauthorized deviceadjacent to the user interface; and (k) responsive to a determination in(j) of the fraud condition, sending captured image data including atleast the second image data, through a network to enable remoteconfirmation of an unauthorized device being adjacent to the userinterface.
 2. The method according to claim 1 wherein (a) and (i1)include emitting radiation from at least one radiation emitting deviceadjacent to a card reader slot on the user interface, and wherein (b)and (i2) include sensing at least one property of radiation with atleast one sensor adjacent to the card reader slot.
 3. The methodaccording to claim 1 wherein (h) includes detecting a change in imagedata corresponding to at least a portion of the user interface.
 4. Themethod according to claim 3 wherein (e) includes sensing a transactionconducted at the machine.
 5. The method according to claim 3 and furthercomprising: (l) responsive to (j), generating a message; wherein (k)includes sending the message through the network.
 6. The methodaccording to claim 3 and further comprising: (l) storing datacorresponding to a plurality of actions comprising the sequence in atleast one data store; wherein (i) includes executing the sequenceresponsive to a triggering event corresponding to installation of anunauthorized device, and wherein the sequence includes sending at leastone message through the network.
 7. A method comprising the followingsteps carried out responsive to operation of at least one computer: (a)emitting radiation from at least one radiation emitting device of anautomated banking machine, wherein the automated banking machineincludes a user interface and a cash dispenser; (b) sensing radiationemitted in (a); (c) determining that a person is in proximity to theuser interface for an extended time without the person attempting atransaction with the machine; (d) responsive to (c), executing asequence of actions including: (d1) emitting radiation from the at leastone radiation emitting device; (d2) sensing radiation emitted in (d1);(d3) comparing the radiation sensed in (d2) and the radiation sensed in(b); (e) responsive to (d3) resulting in met sensed radiationdifferences, (e1) determining that the machine has a fraud conditioncorresponding to installation of an unauthorized device adjacent to theuser interface; (e2) obtaining image data corresponding to the userinterface; and (f) responsive to a determination in (e1) of the fraudcondition, sending image data obtained in (e2) through a network toenable remote confirmation of an unauthorized device being adjacent tothe user interface.
 8. A method comprising the following steps carriedout responsive to operation of at least one computer: (a) emittingradiation from at least one radiation emitting device of an automatedbanking machine, wherein the automated banking machine includes a userinterface and a cash dispenser; (b) sensing radiation emitted in (a);(c) determining that the machine delivered a receipt to each of aplurality of sequential users of the machine and that each of thesequential users did not take the respective receipt; (d) responsive to(c), executing a sequence of actions including: (d1) emitting radiationfrom the at least one radiation emitting device; (d2) sensing radiationemitted in (d1); (d3) comparing the radiation sensed in (d2) with theradiation sensed in (b); (e) responsive to (d3) resulting in met sensedradiation differences, (e1) determining that the machine has a fraudcondition corresponding to installation of an unauthorized deviceadjacent to the user interface; (e2) obtaining image data correspondingto the user interface; and (f) responsive to a determination in (e1) ofthe fraud condition, sending image data obtained in (e2) through anetwork to enable remote confirmation of an unauthorized device beingadjacent to the user interface.